Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
File: API1ekH05ZC6Yudx0gVOAI4O2R4.mft (raw, json)
Hash identifier: S6i+T/pMgalNZI27LmAgzggcvilp1WBINqb511FCEqI=
Subject key identifier: 3B:61:AC:E1:E5:55:20:F0:D8:3C:1A:02:DF:67:7A:B2:57:27:E0:6F
Authority key identifier: 00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
Certificate issuer: /CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Certificate serial: 019D39AF83BDCAE0E5DDD50A241370E3AB1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
Manifest number: 09AB
Signing time: Sun 29 Mar 2026 13:01:36 +0000
Manifest this update: Sun 29 Mar 2026 13:01:36 +0000
Manifest next update: Mon 30 Mar 2026 13:01:36 +0000
Files and hashes: 1: API1ekH05ZC6Yudx0gVOAI4O2R4.crl (hash: LrieSBr29WQ/gzIyeyZIliK+xpDr2Gr5FsJP/bXM6tE=)
2: Oqp0LnSyxA2FjpucrV--rkFrY9M.roa (hash: dShE79kR6w3t9UN+uBV7ehXeiyGLd3Stfbk1UBF24b4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:83:bd:ca:e0:e5:dd:d5:0a:24:13:70:e3:ab:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f2357a41f4e590ba62e771d2054e008e0ed91e
Validity
Not Before: Mar 29 13:01:36 2026 GMT
Not After : Mar 30 13:01:36 2026 GMT
Subject: CN=3b61ace1e55520f0d83c1a02df677ab25727e06f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a2:c0:ec:44:a8:95:22:c7:84:d7:e6:74:3b:
fe:98:f3:d5:e4:17:0b:48:ed:76:24:db:1f:c0:c7:
b9:eb:1d:89:8f:ed:13:cb:ad:db:75:2b:ba:6a:91:
62:9f:d4:f8:7e:b9:09:fb:c2:19:34:95:60:0f:bb:
f8:26:12:2f:15:62:59:df:fc:5b:c7:97:88:9f:58:
a1:7f:ed:d0:5b:85:88:74:10:4d:e5:e1:09:9d:aa:
ff:29:b9:98:88:01:31:85:0b:b4:8b:ed:a1:c8:a6:
10:eb:5d:ef:dd:5e:a6:ad:04:8e:05:89:5d:b2:53:
d4:29:e8:e9:15:4e:f5:24:79:5a:78:10:42:cc:84:
28:0a:16:46:87:81:b9:13:92:9b:ef:8a:c4:82:52:
69:62:a4:5e:24:06:96:7b:3c:d1:cc:f0:63:94:fa:
71:91:10:e9:36:72:a3:ad:b6:d1:05:15:0d:49:fe:
f8:e0:9a:8d:92:c6:55:74:75:5e:0d:06:2f:2a:4f:
cd:7a:76:16:ab:85:6a:b4:ca:ec:47:04:0c:3f:3e:
4e:80:12:f9:83:09:50:eb:c2:53:1e:56:3c:b6:3f:
09:a6:7d:ee:4f:f8:48:70:7f:94:41:c4:02:e2:82:
8f:55:1e:3e:fb:48:39:e7:89:13:96:32:f8:07:62:
cb:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:61:AC:E1:E5:55:20:F0:D8:3C:1A:02:DF:67:7A:B2:57:27:E0:6F
X509v3 Authority Key Identifier:
keyid:00:F2:35:7A:41:F4:E5:90:BA:62:E7:71:D2:05:4E:00:8E:0E:D9:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/API1ekH05ZC6Yudx0gVOAI4O2R4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5d800a-91d0-4be1-9222-5e0fa94bc370/1/API1ekH05ZC6Yudx0gVOAI4O2R4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:3f:81:27:07:2e:cb:d2:41:8e:e5:ac:76:ba:cd:4a:e7:f8:
31:fb:35:60:1e:3a:e0:f6:94:fc:af:a3:61:3e:10:cd:2f:af:
8a:25:84:55:a5:7b:30:c7:8a:59:73:d7:5d:42:5d:e6:d3:d1:
19:33:9f:b0:08:c7:f3:35:66:05:31:6b:67:c5:0c:8b:d1:8c:
67:55:f2:fb:ef:06:de:0f:7d:fd:eb:19:3e:6f:75:1c:0f:88:
c7:b0:6b:e0:70:d3:98:17:60:d1:2c:3e:b8:2b:99:88:3a:0c:
7b:c0:0c:3d:6d:e6:7a:1f:63:f9:69:c4:f4:d8:89:5e:67:5e:
52:46:b8:f7:57:56:e4:ab:eb:df:8c:87:47:47:d7:dd:39:ea:
f8:7f:12:fb:2f:67:ba:21:39:40:99:2c:5a:bd:94:9e:da:af:
23:48:6f:22:1c:71:2c:98:15:b2:53:6e:83:46:b9:17:e8:c8:
3a:b3:70:9f:24:4a:bf:19:76:96:cc:ad:34:04:c1:9a:26:46:
7b:99:08:04:b6:34:6e:89:a9:e7:94:23:0f:69:34:ab:04:c1:
68:be:65:43:0a:a0:b1:64:26:a4:cd:e9:7a:37:1f:bb:c3:f6:
2b:ef:18:4f:ed:e8:8b:71:c0:77:e5:cd:c4:0c:c0:c1:eb:13:
0b:b1:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:23:14 2026 by rpki-client